Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
File: 0qCHG82DdsEajwSaOYVa_NsYMGQ.mft (raw, json)
Hash identifier: A4EJ06CV7XjF4cqJoKFNfKqNCZSzs37n8tYSJSmdTvE=
Subject key identifier: 86:30:68:A5:21:29:C3:04:60:DE:14:FD:B3:8D:6A:38:D9:AB:D1:68
Authority key identifier: D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
Certificate issuer: /CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Certificate serial: 05DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
Manifest number: 05C4
Signing time: Thu 30 Jan 2025 23:15:17 +0000
Manifest this update: Thu 30 Jan 2025 23:15:16 +0000
Manifest next update: Thu 06 Feb 2025 23:15:16 +0000
Files and hashes: 1: 0qCHG82DdsEajwSaOYVa_NsYMGQ.crl (hash: o0KMXRX60uao2+lKxibd4iyYd2Sj86qJvIsqHEX6gzI=)
2: CB304C36307111EDB0CBD946C4F9AE02.roa (hash: FedrzSDMz6K0xdRADgFCG6UG6bEUJhygKHnFHoEZyTU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1498 (0x5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Validity
Not Before: Jan 30 23:15:16 2025 GMT
Not After : Feb 6 23:15:16 2025 GMT
Subject: CN=679c0805-ae9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:0b:ff:1e:2a:c6:07:e8:85:72:1f:fd:c2:
31:07:28:37:a7:7c:7e:66:42:15:a3:65:d7:46:c5:
a3:50:9b:02:91:0f:b7:eb:59:3d:b7:e4:9f:12:b8:
02:1d:ca:0b:33:66:44:db:d9:ea:00:66:82:f5:fe:
74:57:01:5f:6b:7f:49:2d:49:ca:67:d5:43:12:a6:
f4:be:3f:8e:c1:fc:95:58:38:de:67:42:f2:37:0a:
41:f1:54:ba:a2:a5:d1:52:19:37:f9:2e:2e:3d:67:
3c:e4:b9:d7:89:33:37:42:c6:ea:ea:b8:5d:29:28:
cd:e5:6d:0b:2f:5d:df:c0:67:22:3a:c0:f4:58:b0:
4f:8c:b5:0e:88:17:ba:d1:9c:7a:ca:dc:70:eb:9c:
ed:d1:fa:00:3a:0a:41:b7:91:eb:38:59:08:ad:48:
d1:d0:1d:16:93:0a:dc:20:f1:fe:b3:7c:ce:3b:10:
65:17:ce:4c:78:80:e3:77:56:64:57:5a:b0:38:25:
31:06:38:7c:30:0d:72:80:3b:cf:90:fc:42:5a:a3:
64:91:fe:18:62:fa:6b:9c:1c:be:d8:d2:db:87:20:
f0:d7:2f:31:0c:0f:a0:fa:b6:c6:59:97:ba:09:6a:
66:68:c2:0f:7c:ef:ad:d8:5f:e0:7b:4a:6f:01:c6:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:30:68:A5:21:29:C3:04:60:DE:14:FD:B3:8D:6A:38:D9:AB:D1:68
X509v3 Authority Key Identifier:
keyid:D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:7f:1b:b2:31:bc:b2:96:4d:93:03:b7:e1:24:b8:c6:94:61:
bc:6a:1e:13:9b:71:59:ca:df:5b:d4:db:72:6d:66:43:87:1a:
17:b2:29:58:fd:8d:7b:20:14:07:23:f5:6b:86:f5:63:fb:0a:
83:4f:2c:3d:54:29:ec:1d:38:c7:0c:53:bb:c2:6e:07:69:88:
84:0b:a8:3f:c2:08:e0:7e:48:ae:5d:f2:a3:a9:00:c9:8b:5d:
b7:9a:94:42:71:73:95:3d:2f:7d:bc:6d:2b:22:1a:c6:5e:13:
02:65:ed:72:5c:78:37:0d:e3:f0:2b:2e:cd:43:51:23:17:f4:
8d:4d:2d:79:af:00:66:9a:33:fd:b7:b9:0a:65:33:69:16:a6:
dc:82:61:5f:46:b4:c8:8f:ad:bc:51:b3:88:3f:a9:33:93:df:
d1:0b:12:a6:81:42:16:6f:58:18:a5:72:c4:0e:f1:fc:2c:8d:
b1:9a:a3:56:10:e3:6d:4f:32:11:a8:1e:5b:d7:15:6a:cb:4a:
cb:63:4a:20:5e:8f:6b:46:ad:49:90:19:d1:1e:0c:b4:e8:44:
04:44:c2:aa:27:61:b5:19:c7:63:3b:44:05:91:e7:2d:93:fe:
16:c7:63:19:07:d4:40:16:a0:ea:62:68:a6:3a:40:d1:a4:3b:
2e:cc:c1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:24:20 2025 by rpki-client